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AMENDED CLAIMS 

1-14. (cancelled) 

1 5. (new) A method of authenticating a transaction initiated from a mobile 
device by a cardholder, the method comprising the steps of: 

receiving a purchase request message from the mobile device, the 
purchase request message comprising an identifier for the cardholder and 
a merchant URL; 

extracting the identifier from the purchase request message; 

obtaining cardholder data from a database based on the extracted 
identifier; 



connecting with a merchant via the merchant's URL so as to simulate an 
internet browsing session; 



receiving from the merchant an authentication request message; 

forwarding the authentication request message to a remote authentication 
system; 

receiving a purchase authentication web page from the authentication 
system; 

extracting displayable information and storing the purchase authentication 
web page; 

forwarding the displayable information to the cardholder and prompting the 
cardholder to enter his or her credentials; 

receiving the cardholder credentials; 

parsing the stored purchase authentication web page and recognizing the 
cardholder credential field(s); 

inserting the received cardholder credentials into the purchase 
authentication web page; 

sending the populated purchase authentication web page to the 
authentication system; and 

receiving an authentication response from the authentication system. 

16. (new) A system for authenticating a transaction initiated from a mobile 
device by a cardholder, the system comprising a processor that can: 



2 



receive a purchase request message from the mobile device, the 
purchase request message comprising an identifier for the cardholder and 
a merchant URL; 

extract the identifier from the purchase request message; 

obtain cardholder data from a database based on the extracted identifier; 

connect with a merchant via the merchant's URL so as to simulate an 
internet browsing session; 

receive from the merchant an authentication request message; 

forward the authentication request message to a remote authentication 
system; 

receive a purchase authentication web page from the authentication 
system; 

extract displayable information and storing the purchase authentication 
web page; 

forward the displayable information to the cardholder and prompting the 
cardholder to enter his or her credentials; 

receive the cardholder credentials; 

parse the stored purchase authentication web page and recognizing the 
cardholder credential field(s); 
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insert the received cardholder credentials into the purchase authentication 
web page; 

send the populated purchase authentication web page to the 
authentication system; and 

receive an authentication response from the authentication system. 



